Software Security

1. GDPR
2. PCI DSS
3. HIPAA

Certification body :

1. FedRAMP certified Infrastructure(USA)

OWASP - open web app security project
WAF - Web Application Firewall plug-in.

OWASP top 10 :

1. Injection - SQL, and JSON
2. Broken Authentication
3. Sensitive Data exposure
4. XML external entity(XEE)
5. Broken Access Control
6. Security misconfiguration
7. Cross site scripting(XSS)
8. Insecure Deserialization
9. Vulnerable Components
10. Insufficient monitoring and logging

Professional certifications:

1. ISC2 Certified Cloud Security Professional(CCSP)

SAST and DAST in Sandbox.

Fuzzing is a testing method to pass abnormal data to the app.

spray attack